SUSE-SU-2022:3599-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20223599-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3599-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:3599-1
Related
Published
2022-10-17T11:21:21Z
Modified
2022-10-17T11:21:21Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 12 SP3 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).

The following non-security bugs were fixed:

  • x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
References

Affected packages

SUSE:Linux Enterprise Server 12 SP3-BCL / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.180-94.177.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-macros": "4.4.180-94.177.1",
            "kernel-devel": "4.4.180-94.177.1",
            "kernel-default-base": "4.4.180-94.177.1",
            "kernel-default": "4.4.180-94.177.1",
            "kernel-source": "4.4.180-94.177.1",
            "kernel-syms": "4.4.180-94.177.1",
            "kernel-default-devel": "4.4.180-94.177.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3-BCL / kernel-source

Package

Name
kernel-source
Purl
purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.180-94.177.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-macros": "4.4.180-94.177.1",
            "kernel-devel": "4.4.180-94.177.1",
            "kernel-default-base": "4.4.180-94.177.1",
            "kernel-default": "4.4.180-94.177.1",
            "kernel-source": "4.4.180-94.177.1",
            "kernel-syms": "4.4.180-94.177.1",
            "kernel-default-devel": "4.4.180-94.177.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3-BCL / kernel-syms

Package

Name
kernel-syms
Purl
purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.180-94.177.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-macros": "4.4.180-94.177.1",
            "kernel-devel": "4.4.180-94.177.1",
            "kernel-default-base": "4.4.180-94.177.1",
            "kernel-default": "4.4.180-94.177.1",
            "kernel-source": "4.4.180-94.177.1",
            "kernel-syms": "4.4.180-94.177.1",
            "kernel-default-devel": "4.4.180-94.177.1"
        }
    ]
}